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PLUGGING  IN 


■■■?  Nimble  and  fast,  open 
source  frameworks 

can  simplify  application 
deployment  in  the  cloud. 

But  they’re  not  for 
everyone. 


I.l  WORKS  BETTER  TOGETHER. 


Xeon 


+ 


With  HP  Converged  Infrastructure  solutions  powered  by  Intel  Xeon  processors,  you  can 
spend  over  70°o  of  your  time  and  IT  budget  on  innovation  rather  than  maintenance." 

HP  Converged  Infrastructure  integrates  servers,  storage,  networking,  security, 
and  management  software  into  turnkey  systems  that  accelerate  IT,  reduce 
application  provisioning  time  by  75°o,  and  got  you  ready  for  the  cloud." 


convergedinfrasfructure.com 
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RESPONSES  TO; 

Why  Google  Should  Be 
Allowed  to ‘Harvest’ 
Your  Wi-Fi  Data 

ApriUl.20U 


By  current  U.S.  law.  Google  did  not  do 
anything  illegal.  By  custom,  however, 
manufacturers  of  wireless  devices 
betrayed  the  trust  of  their  customers. 
Wireless  has  been  sold  as  an  analog  to 
wired  Ethernet.  In  truth,  wireless  access 
points  ate  adapters  (another  term  would 


accessing  your  network  and  data,  then  be 
proactive  and  secure  your  data  and  access 
points.  It's  that  simple. 

mesaiight 

I  understand  Mike  Elgan’s  position  regaid- 
ing  the  legality  of  Google’s  actions,  but  this 
is  what  concerns  me:  If  Google  was  driving 
down  streets  to  capture  pictures  from 
street  level,  why  would  it  tap  into  Wi-Fi 
networks,  and  why  would  it  collect  data? 
RyckM 

From  what  I  read,  Google  was  recording 
the  IDs  of  the  Wi-Fi  networks  to  build 
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WHY 

can’t  this... 


work  like  this? 


Well,  now  it  can. 

A  Meru  WLAN  restores  your  power 
of  control  and  freedom  of  choice, 
freeing  you  from  the  limitations  of 
traditional  networks  by  giving  you 
virtually  wire-like  quality,  radically 
easier  management,  and  the  ability 
to  add  on  nearly  unlimited  devices. 
Scalability,  flexibility,  and  simplicity 
are  yours.  Regain  control  of  your 
Wi-Fi  network  at  rnerunetworks.com 


Wi-Fi  without  the  WHY. 


Hlils 


CenturyLink  is  committed  to  help  with  premier  business  IT  services. 

With  CenturyLink,  you  get  u  u-u-ai  partue'  a  ta.st  serva’n  delivery  platform  that  speeds  up  cycle  times 
for  ordering,  provisioning  a’'  !  ■■ 'm  '■  a, liable  and  secure  data  transport  s'.stem,  you  cm' 

■  enjoy  the  peace  of  mind  f'et  uumtuv  wr.i.  m-jv'.ih,;  vmi'  aa’a  a"':  traiisa^  •"  ■  e-T-.  Rea^  ’ '' 


Data  I  Voice  i  Managed  Se'maces  |  Clncd  CGntUryLink 


centurylink  com/business 


$20,000.  and  added  a  $10,000  pay¬ 


ment  that  will  be  awarded  for  SQL 


Going  Wireless  in  the  Data  Center 


Bouncing  information  around  a  data 
ceitter,  via  6oGHz  Wi-Fi,  can  speed 
things  up  by  30%  compared  to  using 
traditional  cables,  a  group  of  research¬ 
ers  hxind.  The  technique  is  still  being  perfected, 
but  it  could  yield  an  interesting  approach  for 
enterprises  in  the  not-toodistant  future. 

The  method,  called  “3D  beamforming,” 
was  created  by  scientists  at  the  University  of 
California,  Santa  Barbara.  The  basic  premise 
is  that  data  center  traffic  gets  tied  up  at  key 
points  during  the  day  because  of  congestion  as- 


of  traffic  directly  between  the  servers  that 
need  the  information  —  avoiding  competi¬ 
tion  with  other  servers  and  applications  — 
and  to  do  so  at  top  speeds. 

Scientists  used  mostly  off-the-shelf  gear  to 
set  up  the  system  that  creates  and  transmits 
the  6oGHz  beams,  according  to  Heather 
(Haitao)  Zhang,  one  of  six  primary  research¬ 
ers.  The  design  they  created  bounces  data 
over  server  racks,  off  metal  plates  on  the 
ceiling,  to  specially  designed  antennas  on 


injection  bugs  or  for  what  it  deems 
to  be  “significant”  authentication 
bypass  or  data  leak  vulnerabilities. 


Google.com.  YouTube.com  and  other 


company  called  “highly  sensitive  ser¬ 
vices."  including  its  search  site. 

The  term  “remote  code  execu¬ 
tion"  refers  to  the  most  serious  cat¬ 
egory  of  vulnerabilities;  those  that 
allow  an  attacker  to  hijack  a  system 
and/or  plant  malware  on  a  machine. 
People  who  find  other  bugs  will  be 


words,  the  key  speed  constraint  is  not  the  total  can  be  turned  off  and  on  as  needed,  saving  the  severity  of  the  problem  and 

amount  of  network  bandwidth,  but  rather  how  bandwidth  in  the  process.  But  to  make  sure  where  the  vulnerability  resides, 

much  is  consumed  in  those  short  bursts.  those  connections  can  be  established,  broken  Since  VRP  s  introduction.  Google 

Typically,  data  center  managers  try  to  get  and  remade  at  will,  “the  next  step  is  to  has  received  over  780  eligible  bug 

around  bandwidth  issues  by  maintaining  the  develop  network  protocols  and  management  reports  and,  in  just  over  a  year, 

maximum  bandwidth  needed  to  handle  peak  techniques,"  Zhang  said.  “We  are  currently  paid  out  around  $46a000  to  200 

periods.  The  rest  of  the  time,  though,  band-  working  on  these,”  she  noted,  adding  that  researchers.  The  company  described 

width  can  sit  idle.  So,  rather  than  continuing  she  expects  this  phase  of  the  project  to  take  a  the  higher  bounties  as  a  way  “to  ceT 

to  add  more  infrastructure  that's  used  only  couple  of  years.  ebrate  the  success  of  this  Iprograml.- 

occasionally,  the  idea  is  to  send  those  bursts  -  lohonna  Ambrosio  -  GREGG  KEIZER 
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based  delivery,  though  an  on-premises  version  is 
also  available. 

“If  you  wanted  to  run  Fusion  Applications  in 


Oracle  Users  Prefer 
Fusion  in  the  Cloud 

Customers  say  the  hosted  version  of  the  vendor’s 
next-gen  application  suite  is  easier  to  deploy  and  use 
than  the  on-site  option.  By  Chris  Kanaracus 


Most  of  the  2so  customers  that  have  so  fit 

licensed  Oracle’s  recentlyJaunched  Fusion  Applica¬ 
tions  have  chosen  a  hosted  deployment  model,  ac- 
coiding  to  a  senior  executive  at  the  software  vendor. 
The  majority  of  the  customers  are  also  running 
Fusion  "in  a  coexistence  fashion"  alongside  long-installed  Oracle 
business  software,  such  as  the  E-Business  Suite,  while  planning 
to  add  more  Fusion  modules  over  time,  said  Chris  Leone,  senior 
vice  president  of  applications  development, 

during  a  keynote  address  at  the  company’s  - 

Collaborate  user  group  conference  in  Las 
Vegas  last  month.  | 

’The  Fusion  Applications  suite,  which 
finally  started  sharping  last  October  after 
some  six  years  in  dmlopment,  is  made  up 
of  a  superset  of  Oracle’s  JD  Edwards,  E-Busi¬ 
ness  Suite,  FeopleSoft  and  Siebel  software. 


removing  the  installation  challenges." 

One  prospective  Fusion  Applications  customer, 
Abt  Associates,  a  public  policy  and  business  consul¬ 
tancy,  won’t  even  consider  the  on-premises  version, 

rsaid  Albina  Shekhtman,  director  of  business  ap¬ 
plication  services  and  programs. 

“Our  direction  is:  Let  somebody  else  have  the 

1  headaches,”  she  said. 

Abt  Associates  today  runs  an  E-Business  Suite  im¬ 
plementation  that  lacks  high-availability  functions. 
“In  the  cloud,  1  don’t  have  this  issue,”  she  noted. 

Shekhtman  said  that  the  sole  reason  she  began 
evaluating  Fusion  was  because  she  heard  it  was  an 
USG  online  product. 

She  hopes  to  first  roll  out  the  Fusion  human 
capital  management  software  for  recruitment,  ap- 

. .  plicant  tracking  and  employee  onboarding,  if  she’s 

able  to  convince  Abt’s  human  resources  officials 
that  it’s  the  tight  move. 

The  company’s  HR  department  today  has  “a  very  complicated 
situation”  with  a  software  portfolio  that  includes  Oracle’s 
E-Business  Suite  “and  a  lot  of  bolt-ons,”  which  has  led  to  inac¬ 
curacies  and  inefficiencies,  she  said. 

In  general,  Gonzalez  suggested  that  organizations  start 
Fusion  implementations  “as  small  as  possible.” 

He  also  cautioned  that  users  seeking  to  exchange  older  soft¬ 
ware  for  Fusion  licenses  should  gird  for 

_  battle,  despite  Leone’s  pledge  to  offer  users 

of  older  Oracle  software  license  credits  for 
"like-to-like"  fuiKtionality. 


First  Ivy  Bridge 
Chips  Einerge 

Quad-core  chips  for  high-end  desktops 
are  the  first  to  ship,  with  dual-core  mobile 
processors  set  to  follow  later  this  year. 

By  Agam  Shah  and  Sharon  Gaudin 


The  new  quad-core  chips  include  eight  Core  iy 
processors  and  five  Core  is  processors.  Intel  said. 

The  company  noted  that  the  addition  of  3D  transistors 
in  the  chips,  which  was  possible  because  of  the  move  to 
aanm  manufacturing,  improved  software  and  graphics 
performance  while  preserving  laptop  battery  life. 

Most  laptops  and  desktops  today  run  Intel's  second 
generation  of  Cote  chips,  dubbed  Sandy  Bridge, 
which  was  introduced  early  last  year.  Skaugen  said 
the  new  chips  provide  up  to  twice  the  high-definition 
multimedia  and  3D  graphics  performance  and  a  20% 
CPU  boost. 

Acer,  which  started  shipping  Ivy  Bridge-based  PCs 
the  same  day  Intel  unveiled  the  chips,  has  said  its 
tests  also  found  that  the  new  quad-core  chips  offer  20%  better 
performance  than  the  Sandy  Bridge  processors. 

The  new  Predator  and  Gateway  high-end  desktop  systems 
from  the  Taiwanese  vendor  run  Cote  is  or  iy  processors;  they’re 
priced  between  $699  and  $1,199. 

Intel  hopes  Ivy  Bridge-based  ultrabooks  will  blur  the  lihesbetween 
laptops  and  tablets  by  offering  touchscreens,  long  battery  life,  always- 
on  connectivity,  and  gesture  and  voice  recognition  capabilities. 

Jack  Gold,  an  analyst  at  J.Gold  Associates,  called  the  Ivy 
Bridge  chips  "a  pretty  big  deal.” 

“The  lower  power  and  higher  performance  could  be  a  game- 
changer,"  he  said.  “It  will  be  difficult  for  AMD  to  catch  up  in 
the  short  term.”  The  faster  bool  times  and  longer  battery  life  for 
laptops  and  ultrabooks  should  capture  the  attention  of  corporate 
IT  managers.  Gold  added. 


The  lower  power  and  higher  performance  could  be  a  game-changer,  li  will  be  difficult 
for  AMD  to  catch  up  in  the  short  term. 


Arthur  M. 
Langer 

This  educator 
makes  it  his 
mission  to  mint 
IT  professionals 
on  demand. 

A  little-known  fact  about  you; 

People  see  me  as  an  academic,  but  I 
spent  11  years  at  Coopers  &  Lybrand. 
Also.  I  graduated  from  the  Fiorello  H. 
LaGuardia  High  School  of  Music  &  Art 
and  Performing  Arts  in  New  York, 
what's  your  favorite  vice? 
Chimay.  an  ale  that's  made  in  Chimay. 
Belgium,  by  Trappist  monks. 


What  would  you  be  doing  if  you 
weren't  in  this  career?  I've  always 
wanted  to  own  a  bookstore. 


Arthur  H.  langer  is  chairman  and  founder  of  Workforce  Opportunity  Services, 
a  nonprofit  that  uses  an  outsourcing  model  to  train  economically  disadvantaged 
youth  and  match  them  with  hard-to-fill  IT  positions.  Langer’s  “skills  fint"  ap¬ 
proach  stresses  getting  vocational  training  and  a  job  upfront,  and  then  gradually 
fulfilling  general  education  requirements  part  time  to  finish  a  degree  in  five  to  sixyeors  — 
leaving  students  with  no  debt.  And  since  many  families  today  can't  afford  the  cost  of  college 
tuition,  Langer’s  model  is  one  that  could  have  much  broader  appeal. 


What  is  workforce  Opportunity  Services’  mission?  It  started  as  a  research  project 
about  11  years  ago  with  a  group  from  Harlem,  an  underserved  population.  Colleges 
can’t  handle  nontraditional,  underserved  populations,  and  corporations  also  have  dif¬ 
ficulty  assimilating  that  type  of  talent. 

Continued  on  page  14 
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HERE’S 


BIG  IDEA 


Everything  is  possible  in  Ontario,  Canada.  It’s  a 
dynamic  mariret  where  partnerships  between 
business,  government  and  academia  are  reautting 
in  unprecedented  breakthrbughs  and  diacoMr^ 
Vbu  need  to  be  where  the  iatest  thinking  and  product 
development  is  happening.  Make  Ontario  your  naod 
big  Idea. 


YourNextBigIdea.ca 


^Ontario 

CANADA 


THE  GRILL  I  ARTHUR  M.  LANGER 


U  We  have  to  get 
kids  to  work 

and  advance 
them  in  school 
while  they’re  working.  If  we 
don’t  do  that,  a  vast  portion 
of  our  population  is  going  to 
be  in  trouble. 


Coniinued  from  page  12 

challenge.  These  kids 
need  to  work  because 
they  don’t  have  any 
money  for  schorJ.  They 
end  up  working  35 
hours  per  week,  and 
before  long  they  can't 
do  it.  They  drop  out. 
Meanwhile,  many  com¬ 
panies  can't  find  talent 
because  no  one  wants  to 
go  into  that  discipline  or 
they  can't  get  people  at 
competitive  rates. 

So  we  took  under¬ 
served  young  people 

put  together  a  program 
where  they  could 
work  for  competitive 
wages  while  going 
to  school.  As  they 
progress  through  the 
program,  they  move 
from  working  part 
time  to  full  time.  We 
became  an  outsourcing 
company,  but  we  arc  a 
(nonprofit]  charity. 

How  does  the  busi¬ 
ness  model  work?  It  is 

an  on-demand  model 
for  talent.  We  find  the 
business  client  first, 
and  they  tell  us  what 
they  need.  We  ask 
what  skill  sets  they 
are  seeking,  such  as 


frame  Cobol  or  quality  assurance.  Then  we  design  a 
one-year  curriculum  to  train  students  —  not  just  vo¬ 
cational  training,  but  a  curriculum  that  teaches  them 
how  to  write  and  communicate  and  be  successful  in 
the  business  world.  We  agree  on  the  content,  but  it  is 
our  responsibility  to  convert  that  into  an  acceptable 
academic  program  for  a  major  university. 

We  then  select  an  educational  partner  in  the  area, 
a  flagship  institution  like  Columbia,  Penn  State  and 
others,  and  then  we  find  the  talent  that  matches 
the  need  best.  We  allow  the  client  to  participate  in 
the  selection,  and  we  deliver  the  talent  in  under  20 
weeks,  after  an  initial  six-week  selection  process  and 
then  13  weeks  of  the  first  term.  The  students  work  for 
WOS  as  consultants.  After  a  year,  they  get  hired  away 
by  many  of  these  companies.  In  many  cases,  they’re 


once  a  student  has  a  job,  what  is  his  or  her  incen¬ 
tive  to  keep  going  toward  an  associate  or  bachelor's 

degree?  The  student  gets  a  certificate  from  a  univer¬ 
sity,  and  often  that’s  transferrable  into  credits  at  a 
community  college.  In  New  lersey,  for  example,  the 
certification  issued  by  Rutgers  provides  30  credits, 
which  means  the  student  is  halfway  through  an  as¬ 
sociate  degree. 

After  they  graduate,  as  long  as  they're  working  for 
us,  we  pay  their  education  to  go  part  time  at  night  to 
finish  their  degree.  OtKe  a  company  hires  a  student, 
they  take  over  that  obligation.  The  aim  U  to  have 
them  get  a  degree  after  five  to  six  years  with  no  debt. 

How  Is  th*  program  funded?  Our  billings  cover  our 
costs.  This  model  will  let  uS  transform  our  education¬ 
al  and  job  creation  system  to  compete.  You  can't  just 
keep  putting  in  money  from  the  government. 

What  has  the  organization  accomplished  so  far?  We 

have  doubled  in  size  three  years  in  a  row.  We're  going 
into  areas  where  IT  organizations  are  hurting,  like 
Allentown,  Charlotte  and  Jacksonville.  We  also  see 
an  opportunity  to  grow  our  service  center  areas. 

We  have  over  zoo  consultants  today  in  five  states, 
and  we're  expanding  beyond  IT  to  other  areas,  such 
as  healthcare  and  customer  service  operations.  Thirty 
percent  of  our  consultants  are  women,  and  we  have 
very  high  rates  of  Hispanic  and  African  American 
students.  We  also  have  over  65  veterans  of  the  Iraq 
and  Afghanistan  conflicts  working  at  Prudential, 
Johnson  &  Johnson  and  Sealed  Air. 

How  competitive  is  the  program?  Very.  For  quality 
assurance  positions  at  Siebel,  about  300  people 
applied.  Over  zoo  finished  precertification,  and  we 
could  select  only  30  for  the  certification  program. 

It’s  not  Just  the  economically  disadvantaged  who  are 
having  trouble  financing  a  college  education.  Could 
this  represent  a  new  model  for  higher  education? 

I  think  so.  The  system  that  we  have  just  doesn't  work 
for  a  large  portion  of  our  population  anymore.  Going 
away  to  four  years  of  college  is  no  longer  going  to  be 
a  solution.  They  can’t  afford  it,  there’s  too  much  debt, 
and  they're  getting  out  seeking  jobs  that  aren’t  there. 
Universities  have  to  not  only  become  more  competi¬ 
tive,  but  offer  lower  prices  and  different  types  of 
relationships.  Our  model  is  one  of  the  first  to  do  that. 

We  have  to  get  kids  to  work  and  advance  them  in 
school  while  they're  working  If  we  don’t  do  that,  a  vast 
portion  of  out  population  is  going  to  be  in  trouble. 

They  need  the  skills  first,  so  we  do  the  certifica¬ 
tion  first.  Then  they  go  to  college  while  they  have  a 
job.  Our  students  are  essentially  going  to  school  for 
nothing  because  their  work  and  billings  are  covering 
the  costs  to  allow  them  to  do  that. 

-  Interview  by  Robert  L.  Mitchell 


Microsoft 


BUILT  FOR  TK'-  FUTURE 

READY  W 


Microsoft  Private  Cloud  Solutions 

In  the  future,  you'll  need  to  seamlessly  manage  applications  across  your  private  and  public  clouds. 
Go  with  a  solution  that  gives  you  flexibility  from  a  single  point  of  control. 

Learn  more  at  Microsoft.com/readynow 
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PBESTONGRALLA 


Windows  8 
tablets  powered 
by  ARM  chips 
will  be  no  easier 
to  manage 
than  iPads. 


contributing  editor 
and  the  author  of 
more  than  35  books, 
including  How  the 


Windows  8  Tablets: 

A  Disaster  in  the  Making 


I  ABLETS  WERE  clearly  top  of  mind  for  the  designers  of  Windows  8. 
The  Metro  interface  sacrifices  usability  on  the  PC,  which  suggests 
that  Microsoft  is  focused  on  overtaking  the  iPad.  This  design  choice 
was  met  with  conjectures  that  Microsoft  believed  enterprises  would 


favor  Windows  8  tablets  because  they'd  work  in 
sync  with  Windows  8  on  desktops  and  could  be 
deployed  and  managed  corapanywide  with  the 

Unfortunately  for  Microsoft,  the  facts  show 
something  else.  The  company  has  revealed  that 
any  Windows  8  tablets  powered  by  ARM  chips 
will  be  no  easier  to  manage  in  enterprises  than 
iPads  are.  Such  tablets  won't  be  able  to  take  advan¬ 
tage  of  Active  Directory  capabilities  and  won't 
support  Group  Policies,  which  are  used  to  manage 
how  machines  work  on  a  company  network. 

Windows  8  on  tablets  has  a  confusing  past. 
Windows  8  for  ARM  devices  was  originally  called 
WOA  (for  “Windows  on  ARM"),  and  then  was 
recently  renamed  Windows  RT.  Not  all  Windows  8 
tablets  will  run  Windows  RT;  any  that  use  Intel  chips 
will  require  a  different  version  of  Windows  8.  And  it 
may  well  be  that  Windows  8  tablets  with  Intel  chips 
will  be  managed  differently  than  Windows  8  tablets 
running  Windows  RT.  That  certainly  won’t  endear 
Windows  8-based  tablets  to  IT  departments,  which 
face  a  difficult  enough  time  trying  to  deploy  and 
manage  multiple  types  of  devices.  With  Windows  8 
tablets,  IT  may  have  to  kixiw  what  kindofchip  each 
device  tuns  on  in  order  to  know  how  to  manage  it 

Michael  Cherry,  an  analyst  at  Directions  on 
Microsoft,  tokJ  Computerworid:  "Based  on  what 
we  know  today,  a  Windows  RT  device  will  be  no 
more  manageable  than  an  iPad.”  Michael  Silver, 
a  Gartner  analyst  who  covers  Microsoft,  added, 
“This  soUdly  positions  WOA  as  a  consumer 
[optfon]”  rather  than  one  for  enterprises. 


What  exactly  are  Microsoft’s  plans  for  manag¬ 
ing  Windows  8  tablets  in  the  enterprise?  It’s  not 
completely  clear.  Based  on  a  blog  post  by  Jeffrey 
Sutherland,  a  program  manager  lead  in  Micro¬ 
soft’s  Management  Systems  group,  it  appears  that 
Intel-based  Windows  8  tablets  will  be  managed 
via  a  combination  of  System  Center  Configura¬ 
tion  Manager  and  Windows  Intune  cloud-based 
management  software. 

As  for  managing  Windows  RT  devices,  there 
are  no  solid  answers  yet.  But  if  you  read  between 
the  lines  of  Sutherland’s  post,  it  appears  that 
Intune  will  be  used  for  that  purpose. 

All  this  doesn’t  bode  well  for  Microsoft.  It  will 
be  difficult,  if  not  impossible,  for  it  to  unseat  the 
iPad  in  the  hearts  of  consumers.  And  Microsoft 
is  also  up  against  the  rising  popularity  of  Android 
tablets,  such  as  the  Android  Fire  and  the  Nook. 

The  one  area  where  Microsoft  ajpeared  to 
have  an  advantage  in  the  tablet  market  was  in 
the  enterprise,  since  so  many  IT  departments  are 
partial  to  the  rich  set  of  tools  available  for  managing 
Windows-based  PCs.  If  Microsoft  had  allowed  enter¬ 
prises  to  manage  both  tablets  and  PCs  with  the  same 
tools,  Windows  8  tablets  would  have  the  advantage. 

Now  it  looks  like  Windows  8  tablets  will  be  no 
more  enterprise-friendly  than  iPads  or  Android 
tablets.  Where,  then,  is  the  driver  to  make 
Windows  8  tablets  a  hit  in  the  enterprise?  And 
without  an  enterprise  foothold,  it’s  unlikely  that 
Windows  8  tablets  will  become  successful  overall. 

It  all  adds  up  to  a  potential  disaster  in  the  making 
for  Microsoft’s  plans  to  aack  the  tablet  market.  ♦ 
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GO  DADDY  DNS  ANSWERS  10  BILLION 

QUERIES  DAILY  &  IS  AVAILABLE  OVER  IPV6 

We  take  your  oit:  abii 

GO  DADDY  MANAGES  25  PETABYTES 

OF  NETWORKED  DATA  STORAGE 

We  take  your  data  net 

GO  DADDY  NETWORKS  MOVE  75Gbps 

OF  CUSTOMER  DATA  GLOBALLY  EVERY  DAY 

We  take-your  visitors  serious 

GO  DADDY  BLOCKS  2.5  MILLION 

ATTACKS  TO  OUR  HOSTED  SERVERS  EVERY  HOUR 

Our  world-class  Security  Operations  Center 
takes  security  seriously,  24/7, 


Serious  about  tech?  So  are  we. 

Call  480.463.8272  to  learn  more  or  visit  tech.godaddy.com 
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HEN  IT  CONSULTANCY  OpenCredo 
set  out  to  launch  three  new 
applications  within  seven  months  for 
a  major  insurance  underwriter,  it 
had  three  goals  in  mind:  Trim 
development  time  from  the  usual 
years-long  pace,  allow  for  frequent 
changes  from  the  client,  and  build  a  system  that  can 
handle  unpredictable  traffic  spikes. 

I 


SPOTLIGHT  I  OPEN  SOURCE 


By  using  the  CltMid  Foundry  open-source  frame¬ 
work  along  with  other  open-source  software,  Open- 
Credo  eliminated  "heavy  lifting"  such  as  conBguring 
virtual  machines  and  adjusting  the  size  of  storage 
volumes,  says  CEO  Russell  Miles.  The  framework 
allowed  developers  to  write  code  locally,  share  it  with  . 
the  client,  and  automate  the  integration,  testing,  and 
deployment  of  application  components. 

Among  other  advantages.  Cloud  Foundry  makes 
it  easier  to  scale  an  application  by  adding  more  in¬ 
stances  without  downtime.  Miles  says.  Because  of  the 
way  it  works  with  other  open-source  software,  new 
features  can  be  added  in  minutes  rather  than  hours. 

Even  with  all  those  benefits,  open-source  cloud 
frameworks  like  Cloud  Foundry  are  a  work  in  progress. 
Many  manage  only  physical  servers  or  standalone  ap¬ 
plications,  leading  customeis  who  need  more  sophisti¬ 
cated  capabilities  to  create  their  own  frameworks  (see 
“TWo  Homegrown  Frameworks."  page  22),  However, 
they  offer  compelling  value  because  they  mask  the 
complexity  of  cloud  computing  setups,  and  the  open- 
source  model  is  an  attractive  way  to  do  that. 

Understanding  the  Basics 

The  term  "framework”  is  used  to  loosely  describe 
collections  of  anything  from  development  tools  to 
middleware  to  database  services  that  ease  the  creation, 
deployment  and  management  of  cloud  applications. 
Those  that  work  at  the  level  of  servers,  storage  and 
networks  are  infrastructure-as-a-service  (laaS)  frame¬ 
works.  Those  that  operate  at  the  higher  level  of  applica¬ 
tions  are  platform-as-a-service  (PaaS)  frameworks. 

Among  the  most  popular 
laaS  frameworks  ate  Open- 
Stack,  Eucalyptus,  and  the 
Ubuntu  Cloud  infrastructure. 

Citrix  recently  announced  it 
w’as  making  its  formerly  pro¬ 
prietary  CloudStack  laaS  plat¬ 
form  part  of  the  open-source 
Apache  project.  Gartner 
analyst  Lydia  Leong  wrote  in 
her  Wog  that  this  is  “big  news” 
because  CloudStack  is  much 
more  stable  and  production- 
ready  than  the  “unstable"  and 
"buggy"  OpenStack. 

Popular  PaaS  frameworks 
inclu^  Heroku,  Cloud 
Foundry  (backed  by  VMware), 
and  Red  Hat's  OpenShift. 
which  is  buih  on  a  foundation 
of  Red  Hat  Emerprise  Linux 
with  support  for  a  variety  of 
languages  and  middleware 
through  the  use  of  "cartridges." 

Customers  often  use 
multiple  frameworks  and  as¬ 
sociated  tools.  One  example  is 


the  use  of  OpenStack  to  provision  virtual  machines 
and  Opscode  Chef  to  create  “recipes”  describing 
how  servers  should  be  configured,  says  Opscode 
co-founder  lesse  Robbins.  The  further  up  the  "stacl 
a  platform  operates,  the  less-work  the  customer  mu 
do,  but  they  also  have  less  control  over  the  infrastri 
ture  components,  says  Matt  Conway,  CTO  at  onliro 
backup  vendor  Backupify. 

Beyond  easing  cloud  creation,  most  frameworks 
claim  to  make  it  easier  to  move  cloud  deployments 
among  public  and  private  clouds  to  get  the  lowest  cos 
and  best  service.  For  example.  Eucalyptus  is  meant  tt 
provide  an  Amazon  ECa-compatible  API  that  runs  or 
top  of  Ubuntu  Linux  (the  version  of  Linux  underpin¬ 
ning  the  Ubuntu  Cloud),  “so  apps  authored  for  ECz 
should  be  transplantable  to  one's  own  data  center 
running  Eucalyptus."  says  Conway.  "Deltacloud  was : 
initiative  by  R^  Hat  to  create  a  'cloud  APT  to  abstrac 
your  application  away  from  vendors  like  Amazon,  an 
would  proxy  your  requests  to  the  actual  Amazon  API 
For  online  storage  vendor  CX,  OpenStack  provide 
the  flexibility  to  use  other  cloud  vendors  besides 
Amazon  "if  [Amazon's]  services  become  too  expensi 
or  otherwise  unsuitable,”  says  CX  CTO  Jan  Vandenl 
Anthony  Roby,  a  senior  executive  in  Accenture's 
advanced  systems  and  technology  group,  says  the 
word  “framework”  is  often  misused,  and  offerings 
such  as  Eucalyptus  or  OpenStack  are  “not  frame¬ 
works  at  all,”  but  “products  you  can  extend  or  use  t 
build  your  own  infrastructure  cloud.”  However,  mi 
observers  define  frameworks  as  software  building 
blocks  used  to  create  cloud-based  services  for  usen 

The  Role  of 
Open  Source 

Open-source  projects  rang 
from  “pure”  open-source  d 
velopment  initiatives  direc 
by  nonprofit  foundations  tl 
aren't  associated  with  any 
commercial  vendors,  to  th 
getting  financial,  maritet- 
ing  and  development  help 
from  leading  companies  (s 
“Mixed  Marriages,"  page  2 
Canonical,  which  provki 
support  for  open-source 
efforts  and  plays  a  leading  1 
in  Ubuntu,  has  seen  inter¬ 
est  in  open  source  “from  th 
Fortune  50  to  a  ton  of  SME 
and  startup  companies,"  sa 
Kyle  McDonald,  head  of  cl< 
at  Canonical.  Most  of  the 
company's  OpenStack  busi 
ness  has  come  from  Fortur 
1,000  companies  seeking  t 
reduce  software  costs,  he  s 
Continued  on  po' 


OPEN 

VIRTUALIZATION 

ALLIANCE 


Lower  costs:  Customers  report  up  to  67%  savings 
by  using  KVM^ 

Higher  scalability:  The  top  seven  published 
virtualization  benchmarks  all  use  KVM^ 

Advanced  security:  Virtual  machine  isolation  and 
Common  Criteria  certification  with  KVM^ 


‘Case  study  on  LetterGen,  an  IT  services  provider  in  Belgium;  redhat.com/resourcelibrary/case-studies/lettergen-relies-on-red-hat 
= SpecVirt_sc2010  results:  spec.org/viit_sc2010/results/specvirt_se2010_perf.html 
‘BSI  Certification  for  Common  Criteria:  bsi.bund.de/ContentBSI/ENnopics/Certification/newcert 


OPEN  SOURCE 


Two  HOMEGROWN  Frameworks 


centers,  but  it  found  that  most  of  them  were  focused  only  on 
provisioning  and  control  of  virtualized  servers  "in  sort  of  an 
abstract  way,'  says  chief  architect  Kevin  Sullivan.  They  couldn't 


simplify  more  complex  tasks  such  as  the  ongoing  need  to  update 
Its  800  applications,  provide  the  level  of  authentication  needed 
to  protect  customer  data,  and  discover  and  reuse  services  rang¬ 
ing  from  security  to  data  warehousing  that  State  Street  had 
already  developed  and  wanted  to  move  to  its  private  cloud. 

•We  wanted  to  get  much  higher  in  the  stack  from  provision¬ 
ing  VMS.'  Sullivan  says,  with  a  platform  that  'would  sit  be¬ 
tween  the  application  and  the  infrastructure.'  making  it  easier 
to  move  applications  and  services  among  data  centers  as  busi¬ 
ness  needs  changed.  In  addition,  'because  we  have  3.000  ap¬ 
plication  developers  around  the  world  and  800  applications, 
we  re  continually  introducing  new  code  into  the  environment.' 


he  says.  'None  of  the  cloud  frameworks  dealt  with  any  of  that. 

I  didn't  think  there  was  anything  out  there  mature  enough 
land)  ready  for  the  kinds  of  volumes  we  were  going  to  need.' 

So.  Sullivan  says,  the  financial  services  firm  created  'our  own 
internal  service  registry,  where  we  house  all  of  our  metadata  de¬ 
scribing  all  the  different  categories  of  data  in  our  service  frame¬ 
work.'  Reusing  those  services  was  key  to  developing  new  appli¬ 
cations  more  quickiv  and  increasing  profitability,  he  explains. 

He  says  he  still  has  a  "bias'  for  open  source  over  proprietary 
frameworks,  not  only  because  of  the  lower  cost  of  the  software, 
but  also  because  of  the  ease  with  which  it  integrates  new  capa¬ 
bilities.  Sullivan  says  he  is  continuing  to  evaluate  open-source 
frameworks  and  to  use  components  of  them  where  possible. 

Badtupify  CTO  Matt  Conway  wanted  tighter  integration 
between  a  framework  and  his  infrastructure  than  was  pro¬ 
vided  by  open-source  software.  So.  working  'on  and  off" 
for  five  years.  Conway  wrote  his  own  open-source  "rubber" 
framework  for  managing  multi-instance  deployments  of  Ruby 
on  Rails  applications  to  Amazon's  Elastic  Compute  Cloud  (EC?). 
That  was  the  only  way.  he  says,  to  manage  the  number  of  ap¬ 
plications  and  the  amount  of  data  he  was  storing  on  EC2,  and 
to  provision  and  deprovision  services  quickly  enough. 


SPOTLIGHT  I  OPEN  SOURCE 


While  most  early  users  ot  open-source  prouucrs,  ano  oepioymeni,  our  aisu  imcgiaouu,  i  uies,  uusuicm 

such  as  Chef,  were  cloud  providers  that  sold  services  process  management,  governance,  complex  event 

to  others  customers,  Robbins  says  he  is  “seeing  a  pretty  processing  and  identity  management,  says  Haddad, 

quick  shift  to  pretty  rapid  adoption  in  the  enterprise" 

among  banks,  large  media  companies  and  other  otga-  Questionable  Benefits? 

nizations  that  are  building  tbeir  own  private  clouds.  Some  observers  question  whether  open-source  frame- 

Most  users,  however,  are  not  yet  moving  critical  works  really  deliver  the  benefits  they’re  said  to  offer  — 

applications  to  the  cloud,  because  they  don't  have  the  such  as  portability  among  clouds  providers.  “Eucalyp- 

took  necessary  to  provide  proper  IT  oversight  and  se-  Continued  on  page  24 
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If  youVe  a  big  telco,  maybe  you  are  interested  in  being  able 
to  change  the  code ...  but  most  organizations  wouldn't  do 
that.  The  last  thing  they  want  is  to  have  their  own  specific 
variant  of  the  product  [that  they  would  have  to  support]. 


ilirt-iUjr  in  thotluuil  tcKrhnohjgy  practice  at  Persisi 
Systems,  a  gle)bal  software  development  firm,  ‘it  \ 
already  a  Salesforce  c  trstomer  and  want  to  migrate 
of  yoiir  workload  onto  a  different  platform.  Force.? 
can  be*  a  very  g?KKl  option'  for  von.  If  vou're  alread) 
Office  365  customer  and  have  workUuds  em  |Micr 
soft's  .Net  frantework] ...  it  makes  sense  to  go  tr)w. 
.Micn)soft  .\zure.” 

GcmkI  fits  for  open-source  frameworks  tend  to 
include  experimental  cloud  applications  built  b\ 
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If  youVe  a  big  telco,  maybe  you  are  interested  in  being  able 
to  change  the  code ...  but  most  organizations  wouldn't  do 
that  The  last  thing  they  want  is  to  have  their  own  specific 
variant  of  the  product  [that  they  would  have  to  support]. 


that.  The  last  thing  they 

■  own  specific  variant  of 
the  product"  that  they 
would  have  to  support, 
while  losing  the  ability 


lY.  A  SENIOR  EXECUTIVE  IN  ACCENTURE'S  ADVANCED  SYSTEMS  AND  TECHNOM 


Continued  from  page  22 

tus  replicates  some  of  the  Amazon  APIs,  but  if  you’re 
using  something  on  Amazon  [that]  Eucalyptus  doesn’t 
support,  you're  out  of  luck,”  says  Roby.  “Similarly,  if 
you're  trying  to  run  Java  apps  and  using  the  Spring 
[a^lication  development]  framework,  you've  got  a 

begins  using  features,  such  as  data  storage,  that  can't 
be  accessed  via  Spring,  those  features  may  not  run 
correctly  with  a  iferent  provider.  Without  the  ability 
to  move  underlying  services  as  well  as  the  application 
code,  he  says,  "you  don’t  have  any  portability." 

With  open  source,  users  (or  a  group  of  users)  theoreti¬ 
cally  could  take  the  source  code  and  tweak  it  to  meet 

their  own  needs  if  a  vendor  can't  or  won’t.  However, 
few  users  would  want  to  do  that,  says  Roby.  “If  you’re 
a  big  telco,  maybe  you  ate  interested  in  being  able  to 
change  the  code ...  but  most  organizations  wouldn't  do 


coirununity,  he  says. 

Creating  a  unique 
open-soutce  “fork”  is 
usually  not  something 
you  want  to  do  “unless 

you  absolutely  have  to,”  agrees  Conway,  noting  that  the 
fork  could  stagnate  without  contributions  from  others. 

Much  buzz  surrounds  open  source,  but  proprietary 
frameworks  such  as  Microsoft  Azure  or  Salesfbtce.com’s 
Force.com  can  be  better  choices  "if  you  have  specific 
needs  and  that  platform  already  has  built-in  [elements] 
to  make  the  job  easier,"  says  Shriram  Nataraj,  senior 
director  in  the  cloud  technology  practice  at  Persistent 
Systems,  a  global  software  development  firm.  “If  you're 
already  a  Salesforce  customer  and  want  to  migrate  part 
of  your  workload  onto  a  different  platform,  Force.com 
can  be  a  very  good  option  for  you.  If  you’re  already  an 
Office  365  customer  and  have  workloads  on  [Micro¬ 
soft’s  .Net  framework] ...  it  makes  sense  to  go  towards 
Microsoft  Azure." 

Good  fits  for  open-source  frameworks  tend  to 
include  experimental  cloud  applications  built  by 

Continued  on  page  26 
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)F4)UAL  HOSTII^G. 


Dual  Hosting,  maximum  reliabilit 


What  is  Dual  Hosting?  Your  weix 
in  2  different  data  centers,  in 26 


i  across  multiple  servers 
'ent  geographic  locations. 


1&1  UNLIMITED  PACKAGE 

■  FREE  DOMAIN  With  Private  Registration 

■  UNLIMITED  Traffic 

■  UNLIMITED  Web  Space 

■  UNLIMITED  Click  &  Build  Installs 

■  GEOREDUNDANT  DUAL  HOSTING 


www.1and1.com 
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FOR  SURVEY  RESULTS 
follow  US  on  Twiner 
@FutureOFOSS. 

Join  the  conversation 
using  #FutureOSS. 


THE  FUTURE  OF 

OPEN  SOURCE  IS  OUT  THERE 

In  here  is  where  you  can  see  it. 


The  6th  Future  of  Open  Source  Survey  -  a 

comprehensive  view  into  the  hottest  technologies  in 
mobile,  cloud,  and  geographic  growth  areas  for  OSS. 

See  why  companies  engage  with  OSS  communities. 

Get  a  perspective  on  industry-specific  trends  dominating 
the  next  phase  of  OSS  adoption  and  innovation. 


These  exciting  survey 
results  will  be  featured 
at  the  OSBC  Keynote 
Panel  Discussion; 

Future  of  Open  Source: 
Driving  Industry  Innovation 
Monday  May  21, 2012 
from  9:45 -10:30 


OPEN  SOURCE  LEADEBSWP  KEYNOTE  PANEL; 

Michael  Skotc,  General  Partner 
North  Bridge  Venture  Partners  @m^kok 
Tim  Yaaton,  Presidents  CEO 
Black  Duck  Software  @«ac*_duek_str 
Tom  Erickson,  CEO.  Acquia  &km_efic 


Your  cloud.  Your  way. 

Freedom  to  create.  Develop.  Innovate.  With  OpenStack™  technology  at  your 
back,  you’re  free  to  invent  without  limits  or  lock-in.  Our  diverse  and  growing 
community  of  partners  means  progressive  solutions,  tools,  and  building  blocks 
are  right  at  your  fingertips.  And  with  a  broad  set  of  API  bindings,  libraries,  and 
languages,  you  can  build  the  next  killer  app  -  and  scale  it  -  fast 

Limitations?  That’s  so  yesterday.  Find  your  freedom  in  the  cloud. 


•  Run  web  services  at  global  scale 

•  Customize  and  launch  instances  in  minutes 

•  Quickly  scale  up  or  down  as  workloads  change 


HP  Cloud  0: 

•  Access  robust,  scalable  online  storage 

•  Add  incremental  storage  on  demand,  instantly 

•  Boost  data  durability  with  full  redundancy 


HP  Cloud  CON 

•  Deliver  big  data  to  users  all  over  the  world 

•  Easily  set  up  content  for  distribution 

•  Send  content  fast,  with  lower  latency 


HP  Cloud  Services 


Get  Started  now  at  hpcloud.com 


today  every  website  is  expected  to  query  and  produce 
relevant  results  as  fast  as  the  best  Internet  search 
engines.  "People  need  search  technology  [in]  virtually 
everything  they  do  today.  Everybody  thinks  search 
[capability]  is  going  to  be  embedded  in  everything,” 
says  Whit  Andrews,  an  analyst  at  Gartner. 

Right  now,  most  oiganizations  have  very  constrained 
search  capabilities,  which  ate  usually  based  on  SQL 


just  too  big,  and  it's  happen¬ 
ing  much  too  quickly  in  a  24/7 
environment,”  he  adds. 

Big-time  Search 

Enterprises  of  all  types  are 
starting  to  explore  open- 
source  search  applications 
to  get  a  glimpse  into  their 


WHIT  ANDREWS.  ANALYST.  GARTNER 


The  open  cloud 
is  more  than  hot  air 

a'l  the  h^pe,  thnit--, 

aheadv' deli.eriiiy  secu'e 


For  your  free  white  paper,  Creating  the  Open  Cloud, 
go  to 


ubuntu'’ 
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Continued  fmm  page  jo 

services,”  says  Aye  Thu,  search  team  lead. 

Many  other  search  application  vendors  have  recently 
been  acquired  by  software  giants,  creating  questions 
about  th^  future  direction.  Microsoft  acquired  search 
application  Fast  Search  &  Transfer  in  2008  and  made 
it  consumable  through  ShaiePoint.  In  August  2011,  HP 
acquired  U.K4>ased  Autonomy,  and  two  months  later 
Oracle  aimounced  plans  to  acquire  Endeca,  which  pro¬ 
vides  unstructured  dau  management,  Web  commerce 
and  business  intelligetKe  solutions. 

While  none  of  these  software  giants  has  yet  indi¬ 
cated  that  it  will  stop  supporting  its  newly  acquired 
search  engine,  “any  time  your  tech  provider  is 
bought,  it  makes  you  nervous  —  [especiallyl  if  you’re 
another  technology  provider,”  Andrews  says. 

For  now,  that  leaves  Lucene  Solr  as  the  leading  in¬ 
dependent  enterprise  search  platform.  Lucid  reports 
that  200,000  to  300,000  copies  of  Lucene  Solr  are 
downloaded  every  month. 


search.  First,  "people  want  to  use  efective  search  to 
power  their  websites,  but  they  don’t  want  to  be  both¬ 
ered  with  the  infrastructure,  management  and  main¬ 
tenance  of  it,"  he  says.  LucidWorks  connects  to  their 
websites,  crawls  the  data  and  creates  the  response 
in  the  search  box,  “in  a  much  higher  capability  than 
what  they  have  tight  now,”  Doscher  adds. 

Second,  large  enterprises  ate  turning  to  open-source 
search  when  they  want  to  have  a  sandbox  to  develop 
prototype  apj^cations  —  but  don’t  have  the  develop 
expertise,  infrastructure  or  hardware  to  do  so. 

Third,  companies  may  embrace  the  open-source 
option  if  they’re  trying  to  extend  the  value  of  the 
data  that  they  currently  have.  The  search-as-a-service 
application  is  likely  to  appeal  to  these  users,  says 
Doscher.  Similar  to  what  Salesforce.cDm  provides, 
LuckTs  cloud  application  allows  users  to  crawl 
information  in  their  SaaS  applications  and  then 
search  it  more  effectively  or  integrate  it  with  other 
information  inside  the  enterprise  or  out  on  the  Web. 

“You  can  use  it  as  an  applica¬ 


nt  platform 


People  want  to  use  effective  search  to  power  their 
websiteSp  but  they  don't  want  to  be  bothered  with  the 
hifrastructuiiep  management  and  maintenance  of  it 


PAUIDOSCHEII.CEO.LI 


EMC  is  using  Lucene  Solr  to  build  a  text  analytics 
add-on  for  its  relational  database  offering.  “If  you  look 
at  the  enterprise  search  industry,  most  of  the  old- 
school  players  have  either  been  acquired  or  gone  by 
the  wayside,”  says  George  Chitouras,  senior  director 
of  research  and  development  at  EMC.  “From  my  per¬ 
spective,  the  technolo^  with  the  most  momentum 
behind  it  and  the  one  maturing  most  quickly  is  the 
Lucene  Solr  technology.” 

While  EMC  hasn’t  moved  open-source  search  ca¬ 
pabilities  inside  its  own  enterprise  yet,  Chitouras  says 
he  sees  myriad  uses  for  the  technology  in  almost  any 
industry.  “Any  large  company  has  use  for  information 
tetrievi  whether  it’s  doing  call<enter  processing, 
customer  relationship  management,  even  innovation 
management,”  he  says. 

Open-source  Options 

In  mid-2011.  Lucid  Imagination  released  LucidWorks 
for  the  enterprise,  a  subscripticm-based,  enterprise- 
ready  package  with  support  from  experts  in  open- 
source  search.  Today,  100  enterprise  customers 
use  the  product.  Lu^  also  released  a  cloud-based, 
search-as-a-service  version  in  February. 

Lucid  CEO  Paul  Doscher  sees  three  types  of  needs 
driving  organizations  to  use  enterprise  open-source 


develop  richer  and  more  efec- 
tive  information  applications," 
Doscher  says. 

Lucid’s  chief  scientist.  Grant 
Ingersoll,  also  sees  some  hybrid 
uses  for  open-source  search. 
“You  provision  your  own  appli¬ 
cation  internally  in  your  data 
centers,  but  then  you  spill  over 
excess  capacity  to  the  cloud- 
supported  [version],’’  he  says. 

To  stay  ahead  of  competitors.  Lucid  Imagination 
plans  to  move  into  the  business  intelligence  and  data 
warehousing  spaces  and  enable  integration  with  big- 
data  technolo^,  Doscher  says.  “If  you  put  traditional 
data  warehouse  or  business  intelligence-type  applica¬ 
tions  on  top  of  Hadoop,  in  some  instances,  it’s  almost 
like  trying  to  take  this  manhole  cover  of  opportunity 
and  shove  it  throu^  a  garden  hose,”  he  says.  Applying 
open-source  search  technologies  to  these  areas  will 
alleviate  the  pressure  built  up  from  too  much  data  and 
inadequate  indexing  and  search  capabilities. 

The  volume  of  information  stored  by  enterprises 
going  forward  “is  going  to  be  scary,"  Doscher  says. 

Open-source  search  tedinology  will  address  this  deluge. 

“I  believe  that  what  Google  has  done  for  the  Inter¬ 
net,  technologies  like  ours  will  do  for  the  enterprise 
by  helping  to  consumerize  information  inside  the  en¬ 
terprise,”  Doscher  says.  “Eventually,  you  will  be  able 
to  have  natural-language  queries  inside  the  enterprise 
that  touch  all  the  diferent  databases,  applications 
and  ERPs  that  the  enterprise  runs.  This  will  allow 
per^le  to  get  instanUneous,  real-time  information 
that’s  consolidated  and  contextually  relevant  around 
the  subject  that  they’re  interested  in."  ♦ 

Colivtt  is  a  Computerworld  contributing  writer. 

You  con  contact  her  at  stcoIlettlSaoLcom. 
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a  website  gets  pushed  down  on  the  list.  But,  that's  where  people  are 
looking  for  you  now.  With  iPage,  you  can  have  a  website  live  in 
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Inner  Circle  panel  members  get  exclusive  access  to  results  of  the  surveys 
on  the  panel  site  at:  www.computerworldinnercircle.com,  and  are  eligible  for 
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COMPUTDnilMU 

INNER  CIUCLE 

RESEMiCHPIUIEL 


Barraged  with  requests  for 
mobile,  social  and  analytics  apps, 
IT  must  prioritize  projects  to  give 
the  business  what  it  wants. 
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Joining  Forces  To  Help  You 
Get  To  the  Cloud. 


We've  combined  our  strengths  with  those  of 
select  partners,  communities,  and  competitors 
in  the  open  source  space. 

Why?  Because  we  recognize  that  heterogeneity 
is  a  fact  of  life  in  IT,  and  are  actively  committed 
to  bringing  you  unified  solutions  for  your 
mixed  environment  investments,  now  and 
into  the  future. 
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See  us  at  the  Open  Source 
Business  Conference  in 
San  Francisco,  CA 
Monday,  May  21,  2012 


Microscft  I  Open  Solutions  Group 


There's  no  such  thing  as  fake  dollars  in 
a  company. ...  In  this  financial  climate, 
things  need  to  be  scrutinized. 

PAUL  MAJOR.  MANAGING  DIRECTOR  OF  IT.  A^PEN  SKIING 


Continued  from  page 

Lately,  however,  the  juggling  act  has  grown  far  more 
intense,  says  Major,  Aspen’s  managing  director  of  IT. 

Thanks  to  the  mania  surrounding  mobile  and  social 
technologies.  Major’s  group  is  constantly  being  pep¬ 
pered  with  requests  to  launch  new  projects.  A  business 
executive  reads  about  a  cool  app  in  an  in-flight  maga¬ 
zine  or  Joe  in  operations  overhears  casual  conversation 
about  technology  while  on  the  slopes,  and  Major’s 
email  box  starts  to  fill  up. 

“The  game-changer  is  the  sheer  amount  of  demand 
on  IT  h)t  new  technologies  that  don’t  follow  the  normal 
trajectory  of  IT.’’  says  Major.  “You  can’t  just  have  a 
thousand  random  requests  coming  in  because  so  much 
is  new  and  untested.  Mote  than  ever,  there  has  to  be  a 
voice  of  sanity  about  what  these  technologies  are  going 
to  do  and  what  the  long-term  strategy  is." 


tize,  but  in  how  it  interacts  with  other  business  units 
to  deliver  new  tools.  IT  needs  to  figure  out  how  to 
manage,  acquire,  support  and  build  mobile  apps.  It  also 
needs  to  rethink  the  entire  end-user  computing  experi¬ 
ence  with  mobile  in  mind,  according  to  Cearley. 

Since  resources  aren’t  infinite,  he  says,  IT  manage¬ 
ment  needs  to  recast  its  role  to  become  more  of  a  broker 
of  services  —  one  that  works  in  concert  with  the  busi¬ 
ness  side  to  understand  priorities  and  then  acts  to  facili¬ 
tate,  rather  than  impede,  new  technology  deployment. 

For  example,  instead  of  shooting  down  a  request  for 
a  mobile  application  because  of  security  concerns  —  or 
green-lighting  another  simply  because  someone  thinks 
it’s  cool  —  Cearley  says  it  is  IT’s  responsibility  to  help 
the  business  understand  core  risks  and  highlight  the 
technologies  available  to  help  mitigate  those  risks. 

“Being  proactive  means  helping  the  business  under¬ 
stand  how  new  technologies  like  mobile  can  impact 
the  business,"  he  explains.  “Governance  cannot  be  the 
mechanism  to  just  say  no.  Governance  needs  to  be  the 
mechanism  to  help  direct  and  support  the  require¬ 
ments  of  the  business." 

That’s  an  outlook  that  Major  is  uking  to  heart  at 
Aspen  Skiing.  With  an  onslaught  of  personal  devices 
showing  up  at  work  and  near  universal  demand 
among  employees  for  mobile  apps  that  can  support 
guest  services  like  ticketing  and  ski  rentals.  Major  put 
together  an  executive  steering  committee  to  which  he 
Continued  on  page  40 
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So  rather  than  signing  off  on  a  virtual  desktop  client 
that  would  have  allowed  Aspen's  enterprise  apps  to  run 
on  a  mobile  platform  —  but  needed  to  be  developed 
from  scratch  —  the  management  focus  group  instead 
suggested  a  handful  of  specific  ticketing,  rental,  retail 

employee-owned  devices  without  the  high  costs  and 
labor  associated  with  mobile  development. 

Taking  Stock  of  the  Portfolio 

In  addition  to  involving  business  directly  in  the  pri¬ 
oritization  process.  Major  is  kicking  off  a  new  project 
portfolio  management  strategy  to  rein  in  what  he  says  is 
an  unsustainable  number  of  projects  in  the  IT  pipeline. 

Working  with  a  strategic  group  of  six  people  evenly 
split  between  IT  and  finance,  the  team  is  conducting  in¬ 
terviews  with  senior  staff  members  from  every  area  of  the 
business  to  identify  all  current  and  requested  IT  projects 
—  anything  as  complex  as  a  call  for  a  new  business  intel¬ 
ligence  system  or  as  simple  as  an  order  for  a  new  mouse. 

The  projects  are  then  categorized  to  find  opportuni¬ 
ties  for  reuse  and  optimized  licensing  arrangements. 

find  out  where  we  want  to  be  in  i8  months,  and  then 
categorize  projects  using  man-hours,  costs,  risks  and 
priorities,”  Major  says.  “If  we  can  distill  out  of  the  list 
the  top  five  or  to  projects,  we  can  present  those  to 
executive  leadership  and  get  decisions  about  funding." 

Developing  Apps  in  a  New  Way 

At  Catalina  Marketing,  new  mobile  apps  and  business 
intelligence  projects  are  so  central  to  the  corporate 
charter  that  business  units  are  eager  to  work  in  step 
with  IT  to  lobby  top  management  for  support. 

As  a  result,  Catalina’s  250-person  IT  department  has 
essentially  been  given  a  blank  check  to  bring  in  the 
resources  that  it  needs  to  get  the  job  done,  “and  there  is 
no  aigument  about  moving  [other  projects]  down  the 
hierarchy  list,”  explains  Eric  Williams,  former  CIO  at 
the  company,  which  provides  promotions  and  marketing 
services  to  clients  in  the  retail  and  healthcare  industries. 

“Sales  teams  in  the  different  business  units  have 
made  it  cleat  to  the  CEO  that  this  is  where  we  need  to 
be,"  says  Williams,  who  retired  last  December. 

The  high  level  of  involvement  from  business  stake¬ 
holders  h^  also  spurred  IT  to  rethink  its  development 
process,  moving  from  a  very  structured,  waterfall  method 
to  a  more  ad  hoc  approach  where  IT  teams  up  with  mar¬ 
keting  or  other  business  units  to  quickly  Md  a  mobile 
app  or  lautKh  an  analytics  prograrh  —  sometimes  in  a 
matter  of  days  rather  than  weeks  or  months. 

“Business  people  artd  the  marketing  team  are  so 
wanting  this  technology,  they  are  willirig  to  work 
with  developers,  literally  sitting  at  the  desk  with  them 
throughout  the  day  answering  questions,”  Williams 
says.  “It’s  much  more  cohesive  integration  of  product 
development  than  I’ve  seen  in  the  past.” 

Williams  admits  there  has  been  a  ramp-up  to  the 
new,  more  agile  approach  and  that  the  team  is  doing  a 
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A  Data  Center  in  the  Cloud 
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We  will  be  hosting  our  servers  in  three  types  of 
cloud  environments:  public,  hybrid  and  private. 
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Tlu-se  are  the  main  security,  applica 
tion  and  infrastructure  controls  that  we 
must  address  as  we  progress  toward  this 
new  era  of  server  provisioning.  ♦ 

M-.  HKiy  mumigcr.  ^‘Mathias  Thurman,” 


IS.  Coufucl  linn 
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profiles  that  limit  and,  if  necessary,  build 


V  COMPANY  has  outgrown 
its  offices  and  will  be 

ity  next  year.  While  the 
company  as  a  whole  will 
have  more  space,  the  data  center  will 
shrink  to  less  than  half  the  square  footage 
it  now  occupies.  The  goal  is  to  decrease 
the  data  center  footprint  by  6o%. 

Naturally,  the  cloud  will  be  key  to  that 
data  center  shrinkage.  And  of  course, 
whenever  the  cloud  comes  into  play. 


back  to  our  company,  creating  a  trust 
relationship.  The  third  is  a  private  cloud, 
where  we  will  host  a  virtual  environment 

To  govern,  automate,  control  and  gain 
visibility  into  these  various  environ¬ 
ments,  we've  been  looking  at  a  couple  of 
companies  that  offer  a  one-stop  shop  for 
the  provisioning  of  servers  in  all  three 

that  scares  me.  I  don’t  want  engineers 
who  access  this  new  platform  to  be  able 


workflow  for  the  provisioning  of  certain 
servers.  This  would  prevent  the  unneces¬ 
sary  build  out  of  a  DMZ  or  production 
server  and  keep  our  intellectual  property 
from  being  exposed  in  less  secure  envi¬ 
ronments.  These  profiles  must  integrate 
with  our  company's  Active  Directory 
infrastructure,  so  when  an  employee  is 
terminated,  access  to  the  new  platform 
will  be  removed. 

Third,  all  servers  must  comply  with 
our  configuration  management  policies 
regarding  things  like  patch  manage¬ 
ment,  antivirus  protection,  the  disabling 


hybrid  cloud  in  which  we  host  infrastruc¬ 
ture  (including  virtual  servers)  at  a  third- 
party  data  center  and  huild  a  VPN  tunnel 


could  be  provisioned  from  an  untrusted 
Internet  kiosk  in  Mexico,  for  example. 
Therefore,  I’ve  asserted  five  security 


tion  and  infrastructure  controls  that  we 
must  address  as  we  progress  toward  this 
new  era  of  server  provisioning.  • 

This  week's  journal  is  written  by  a  real 
security  manager,  “Mathias  Thurman,” 

disguised  for  obvious  reasons.  Contact  him 
at  mathias_thurman@yahoo.com. 


We  will  be  hosting  our  servers  in  three  types  of 
cloud  environments:  public,  hybrid  and  private. 
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VICTOR  HUGO,  the  great  writer  of  19th-century  France,  said, 

“You  can  resist  an  invading  army;  you  cannot  resist  an  idea  whose 
time  has  come.”  The  same  can  be  said  of  technologies. 

Currently,  four  transformational  technologies  define  the  IT  agenda: 


big  data,  social  networking,  mobile  and  cloud 
computing.  You  can’t  resist  these  technologies, 
but  the  question  is  whether  you  will  deploy  them 
resignedly  —  that  which  can’t  be  resisted  must  be 
accommodated  —  or  exploit  them  aspirationally, 
in  ways  that  really  make  a  difference. 

In  the  pattern  of  technology  adoption  called 
“mirroring,"  an  organization  identifies  a  new 
technology,  “sandboxes”  its  properties  via  a  series 
of  controlled-risk  internal  experiments  and  finally 
applies  that  technology  to  existing  work  process¬ 
es.  The  new  technok^  is  deployed  to  mirror  the 
existing  way  of  doing  things. 

When  it  comes  to  transformation  and  aspira¬ 
tion.  this  is  about  as  low  as  you  can  get.  If  you 
don't  see  that,  think  of  the  classic  case  of  mir¬ 
roring:  As  Americans  transitioned  from  a  nation 
of  radio  listeners  to  one  of  television  watchers, 
the  initial  rollout  of  the  new  technology  featured 
radio  performers  reading  scripts.  The  only  thing 
that  changed  was  that  the  technology  had  moved 
beyond  the  microphone  to  include  a  camera. 

With  the  hindsight  of  several  decades,  we  can 
all  easily  see  how  that  approach  underutilized  the 
potential  of  television.  But  can  we  see  as  clearly 
how  we  ate  undeiexplohing  the  new  technologies 
now  available  to  us?  Do  we  really  need  to  take  baby 
steps  with  these  powerful  and  potentially  game¬ 
changing  tools?  Shouldn’t  we  change  our  mindset 
and  aggressively  explore  what  previously  impos¬ 
sible  things  these  new  technologies  allow  us  to  do? 

I  believe  we  should.  IT  should  aspire  to  more 
than  KTLO  (that’s  “keeping  the  lights  on”).  But 


too  often  we  don’t.  A  management  framework 
in  widespread  use  today  divides  IT  investments 
and  technologies  into  three  buckets:  running, 
growing  and  transforming  the  business.  On 
average,  65%  of  IT  spending  goes  to  tunning  the 
business,  25%  to  growing  it  and  a  mere  ro%  to 
transforming  it.  This  has  to  change.  Are  you  the 
leader  who  can  make  that  happen  —  who  insists 
that  transformational  technologies  be  deployed 
aspirationally? 

If  you’re  wondering  where  to  start,  there’s  no 
question  that  big  data  in  general  and  high-perfor-  ’ 
mance  analytics  in  particular  are  a  source  of  com¬ 
petitive  advantage.  The  convergence  of  improved 
analytics,  larger  bandwidth,  cheaper  storage  and 
increased  computing  power  gives  senior  manage¬ 
ment  the  opportunity  to  materially  compress  the 
time  it  takes  to  know  key  things  about  markets, 
customers,  competitors  and  events. 

Retailers  know  this.  Retailing  has  become  a 
know/don't  know  blood  sport.  The  most  powerful 
tool  for  modern  retail  gladiators  is  analytics.  In 
the  past,  a  retailer  might  have  looked  at  product 
data  by  class  or  subclass,  aggregated  at  a  company 
level,  at  monthly  and  sometimes  weekly  intervals. 
Today,  retailers  need  data  granularity  that  focuses 
on  specific  SKUs  and  stores,  analyzed  and  acted 
upon  every  day,  if  not  several  times  a  day. 

Let  me  close  with  another  quote,  this  one  from 
the  Renaissance  poet  Giambattista  Marino:  “Let 
him  who  cannot  amaze  work  in  the  stables.”  With 
regard  to  big  data  and  high-performance  analyt¬ 
ics,  he  who  does  not  aspire  will  not  work  at  all.  ♦ 
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Unlocking  new  business  opportunities 

Delivering  exceptional  experiences- 
to  developers  and  end-customers 


Learn  more  at  www.intel.com/opensource 
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jump-starting  a  young  career 
office  politics. 

I  graduated  last  spring  with  a  computer  science  degree  and 
some  decent  coding  chops,  but  I'm  still  unemployed.  How  can 
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I  took  a  job  at  a  smaller  company  last  year,  hoping  for  a  work¬ 
place  where  office  politics  were  less  intense.  But  they're  actual¬ 
ly  more  intense  here.  What's  the  best  way  to  stay  out  of  all  that 
nonsense?'  I'l  •>  uoMics.. no  a  panel  any  job-  small  company  or 
I  •'■ge.  Polilits  are  not  necessar  ily  Dad.  and  there  is  no  real  way  to  avoid 
if'ein.  50  the  questii  -n  must  be  how  to  elfectively  cope  with  them. 

T.;,  r*  V-  .re'.sr-i,  lOu  must  learn  the  rules.  Politics  is  the  most 
:  -r  -•  game  -/a:  '.'nil  ever  learn,  and  playing  poorly  can  cost  you 

her  that  ntfice  politics  differ  from  office  gosSip  -  stay  out  of  the  latter. 
Off  ice  pofiiics  center  on  someone  trying  to  gam  advantage.  It  is  the 
way  workers  engage  together.  This  can  be  positive,  when  leveraged  for 
coooeratioa  or  negative,  when  used  to  compete.  Learn  the  dynamts 
cl  itie  organization.  For  example,  how  is  collaboraiion  rewarded? 

If  you  help  others  be  strenger  without  shining  the  light  on  yourself, 
you  Will  gain  powerful  allies.  Share  information  from  the  outside 
through  independent  research  that  you  completed  that  helps  your 
colleagues  or  manager  see  opportunities. 

Being  nonthreatening  and  collegial  will  go  a  long  way  toward  win- 
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MARKETPLACE 


^dtSearcK 

The  Smart  Choice  for  Text  Retrieval '  since  1991 


Instantly  Search 
Terabytes  of  Text 


•  25+  fielded  and  full-text  federated  search  options 

•  dtSearch's  own  file  parsers  highlight  hits  in 
popular  file  and  email  types 

•  Spider  supports  static  and  dynamic  data 

•  APIs  for  .NET,  Java,  C++,  SQL,  etc. 

•  Win  /  Linux  (64-bit  and  32-bit) 

Ask  about  fully-functional  evaluations! 

www.dtSearch.com  i-soo-it-finds 


t  Desktop  with  Spider 
r  Network  with  Spider 
“  Publish  (portable  media) 
r  Web  with  Spider 
C  Engine  for  Win  &  .NET 
7  Engine  for  Linux 


Make  the  Most  Out  of  Your  Advertising  Budget. 
Reach  Computerworld’s  Targeted  Audience. 

94%  of  those  surveyed  said  theytake  one  or  more  actions  as  a  result  of  seeing  an  advertisement, 
with  75%  visiting  an  advertiser’s  website.* 
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Contact  Enku  Gubaie  for  more  details. 
508.766.5487 

egubaie@idgenterprise.com 
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Law  Firms 
IT  Consultants 
Staffing  Agencies 


your  Labor 
Certification 
Ads  here! 

Are  you  frequently 
placing  legal  or  immigration 
advertisements? 

Let  us  help  you 
put  together  a 
cost-effective  program 
that  will  make  this 
time-consuming 
task  a  little  easier. 

Contact  us  at: 

800.762.2977 
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Court  Has  Compromised 
Software  Rights 


So  it's  against 
the  law  to  steal 
office  supplies, 
but  it's  OK  to 
steal  valuable 
software? 


•art  Perkins  is 

managing  partner  at 
Louisville.  Kv.based 
Leverage  Partners,  which 
helps  orpniaations 
invest  well  in  IT.  Contact 
him  at  BartPerkinsg 
LeveragePartners.com. 


N  APRIL  11,  our  judiciary  system  failed  the  IT  industry  by  limiting 
the  ability  of  corporations  to  protect  their  internal  software. 
Specifically,  the  U.S.  Second  Court  of  Appeals  reversed  the  2010 
conviction  of  Sergey  Aleynikov  under  the  Economic  Espionage  Act 


(EEA).  During  his  last  day  as  a  Goldman  Sachs 
programmer.  Aleynikov  uploaded  proprietary 
software  that  enhatKes  Ckridman's  high-speed 
trading  capabilities.  Shortly  thereafter,  he  joined  a 
company  that  develops  software  tools  for  financial 
services  firms.  What  a  coincidence. 

While  the  judges  acknowledged  that  the  code 
Aleynikov  us^  was  “highly  valuable.”  they  ruled 
that  he  had  not  violated  the  EEA,  since  Goldman 
had  developed  the  code  for  internal  use,  not  for  sale. 
Further,  he  had  not  violated  the  National  Stolen 
Property  Act  (NSPA).  because  he  hadn’t  stolen  a 
physical  object.  So  it's  against  the  law  to  steal  office 
supplies,  but  it’s  OK  to  steal  valuable  software? 

This  ruling  is  disastrous  if  your  company  has 
developed  software  for  internal  use.  You  need  to 
take  the  following  precautions: 

Altrt  mtcMIW  namfCIMIlL  IT  leadership 
needs  to  make  executives  aware  of  potential 
exposure.  Executives  who  read  about  the  ruling 
may  not  fully  appreciate  how  legal  protection  for 
company  systems  that  provide  competitive  advan¬ 
tage  has  been  compromised.  Even  if  your  risk  is 
small,  you  don’t  want  someone  else  —  an  outside 
adviser,  a  board  member  or  the  CEO’s  golfing 
buddy  —  to  alert  executives  to  the  Aleynikov  case. 

AiHltt  software  safetuard  praetkxs.  Most  com¬ 
panies  implemented  safeguards  —  including  se¬ 
curity  measures  to  protect  code,  and  employment 
contracts  to  preserve  the  company’s  rights  — 
years  ago.  But  all  safeguards  must  be  periodically 
updated  for  relevance  and  tested  for  compliance 
to  standards.  This  can  be  particularly  difficult  in 
decentralized  or  multinational  corporations. 


Collaborate  with  legal,  hr  and  public  rela¬ 
tions.  Help  the  legal  department  undersUnd  the 
implications  of  the  case.  The  ruling  makes  it  much 
more  difficult  to  use  either  the  EEA  or  the  NSPA 
to  protect  the  company’s  rights.  In  the  event  of  a 
similar  theft,  legal  action  must  depend  on  other 
laws  or  corporate  employment  contracts  (in  compli¬ 
ance  with  state  labor  laws).  If  a  theft  occurs,  be 
proactive  about  press  coverage;  litigation  can  easily 
become  a  public  relations  nightmare,  portraying  the 
heartless  corporation  pitted  against  the  little  guy. 

Demand  clarity  from  Congress.  Judge  Guido 
Calabresi  of  the  Second  Circuit  wrote  a  sepa¬ 
rate  opinion  saying  that  he  found  it  difficuh  “to 
conclude  that  Congress,  in  this  law,  actually 
meant  to  exempt  the  kind  of  behavior  in  which 
Aleynikov  engaged.”  He  went  on  to  ask  Congress 
to  clearly  define  criminal  behavior  under  the  EEA. 
Work  with  your  lobbying  organization  to  request 
congressional  action.  And  make  sure  someone  in 
your  organization  is  responsible  for  monitoring 
legislative  progress. 

The  EEA  and  the  NSPA  were  probably  adequate 
when  written.  But  the  needs  of  IT  organizations 
have  eclipsed  the  understanding  of  law-making 
bodies  worldwide.  Congress  needs  to  update  both 
acts  to  reflect  current  technological  capabilities. 

The  Aleynikov  ruling  only  encourages  other 
thefts  of  valuable  IT  software.  Fight  back.  Think 
creatively.  (Potential  thieves  surely  will.)  What 
development  processes,  employment  agreements, 
security  proc^ures  or  other  safeguards  need  to  be 
established  or  updated  in  your  corporation?  Take 
action  before  it's  too  late.  ♦ 
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Why  not  build  a  workload  once— then  run  it 
anywhere  across  physical,  virtual  and  cloud? 
SUSE  Linux  Enterprise,  is  built  for  mixed  IT:  it 
runs  flawlessly  on  any  hardware  platform,  on  any 
hypervisor  and  in  any  cloud.  With  support  for  over 
6,000  applications,  and  partnerships  with  VMware. 
Microsoft  and  SAP  you  get  the  support  and 
versatility  you  need,  anywhere  you  want  it. 
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Performance,  Reliability  or  Scalability? 

With  the  new  IBM  System  x3650  M4  Express  Server, 
you  can  choose  all  three. 

The  right  kind  of  IT  environment  is  an  important  factor  for  business  growth.  That's  why  the  new 
IBM  System  x3650  M4  Express  server,  with  the  latest  Intel®  Xeon®  processor  E5-2600  series, 
can  be  an  ideal  foundation  tor  your  business-critical  solutions.  Along  with  industry-leading 
reliability,’  this  server  can  offer  up  to  80%  more  processing  power, ^  four  times  more  memory^ 
and  higher  networking  bandwidth''  than  previous  generation  two-socket  systems.  Add  to  all 
this  the  expertise  of  IBM  Business  Partners,  aryd  you  get  an  IT  environment  set  to  help  your 
business  succeed  and  grow. 

The  new  IBM  System  x  servers  enable  solutions  to  help  you  achieve  a  better  future,  faster. 
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